add test for variable override

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
dev-sec · Dec 16, 2020 · 4e4aaad · 4e4aaad
1 parent beda26a
commit 4e4aaad
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/molecule/os_hardening/molecule.yml b/molecule/os_hardening/molecule.yml
@@ -62,4 +62,5 @@ scenario:
     - converge
     - idempotence
     - verify
+    - variable_override
     - destroy
diff --git a/molecule/os_hardening/variable_override.yml b/molecule/os_hardening/variable_override.yml
@@ -0,0 +1,16 @@
+---
+- name: wrapper playbook for kitchen testing "ansible-os-hardening" with custom vars for testing
+  hosts: all
+  become: true
+  collections:
+    - devsec.hardening
+  tasks:
+    - name: workaround for https://github.com/ansible/ansible/issues/66304
+      set_fact:
+        ansible_virtualization_type: "docker"
+        os_env_umask: "027 #override"
+    - include_role:
+        name: os_hardening
+    - name: verify os_env_umask
+      shell:
+        cmd: grep "027 #override" /etc/login.defs